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MEMORANDUM 


To:        Secretary  L.  Edward  Lashman 

Executive  Office  for  Administration  and  Finance 


State  Auditor  Joseph  A.  DeNucci 
Office  of  the  Auditor 


Representative  Richard  A.  Voke,  Chairman 
House  Committee  on  Ways  and  Means 

Senator  Patricia  D.  McGovern,  Chairman 
Senate  Committee  on  Ways  and  Means 


Inspector  General  Joseph  Barressi 
Office  of  the  Inspector  General 

Comptroller  William  Kilmartin 
Office  of  the  Comptroller 


Thru:    Frankly/p /l^^iy        , 
Chancelloiy^/^'       /       / 

'     I 

From:   Joseph  J.  Casarai;io     '^^p^-^i.pSv  ^  .  Cc.:ux*\xuwcr 
Director  of  Compliance  Unit 


Re:        Report  of  Audit  Results  and  Activities  for  the  Office  of  Compliance. 

Pursuant  to  the  provisions  of  Chapter  199  of  the  Acts  of  1987,  I  have  attached  for  your  information  a  Report  of 
Audit  Results  and  Activities  for  the  Regents  Compliance  Unit  for  the  period  March  1,  1988  through  December  30, 
1988. 

As  you  know,  the  Compliance  Unit  was  created  by  the  Legislature  to  perform  financial  and  programmatic  audits  of 
all  accounts  administered  under  the  auspices  of  the  Board  of  Regents.  Our  goal  is  to  assist  all  levels  of  management  of 
the  public  institutions  of  higher  education  and  Regents  Office  in  the  discharge  of  their  fiscal  responsibilities  in  order  to 
achieve  operational  economy,  efficiency  and  effectiveness.  The  Compliance  Unit  will  also  assist  the  institutions  and 
Regents  Office  in  preventing  and  detecting  fraud  and  waste  in  operations. 

As  the  enclosed  report  indicates,  our  efforts  during  the  period  in  question  were  primarily  centered  at  Roxbury 
Community  College.  The  Compliance  Unit  led  a  Special  Team  on  Fiscal  Operations  assigned  to  the  College  to  assist  it 
in  resolving  administrative  actions  taken  against  the  College  by  the  U.  S.  Department  of  Education  and  to  assist 
management  in  correcting  serious  problems  existing  in  its  fiscal  operations.  Although  this  task  compromised  the  Com- 
pliance Unit's  independence  and  prevented  us  from  visiting  other  institutions  in  furtherance  of  our  goals,  the  Board  of 
Regents  took  the  position  that  Roxbury  Community  College  must  receive  all  available  assistance  to  insure  the  continued 
operation  of  the  institution  and  its  federal  financial  aid  programs. 


I  welcome  any  comments  or  questions  you  have  on  the  attached  report. 
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OFFICE  OF  COMPLIANCE 
AUTHORITY  AND  RESPONSIBILITIES 

A.  BACKGROUND: 

Chapter  199  of  the  Acts  of  1987,  approved  on  July  8,  1987,  established  the  Office  of  Compli- 
ance and  specifically  sets  forth  the  authority  of  the  Office. 

Item  7066-0008  provides: 

"for  an  Office  of  Compliance  reporting  to  the  chancel- 
lor of  the  board  of  regents,  to  perform  financial  and 
programmatic  audits  of  all  accounts  administered  under 
the  auspices  of  the  board  of    regents...." 

It  is  intended  that  the  Compliance  Unit  have  a  central  role  in  identifying  problem  areas  and 
monitoring  the  establishment  and  application  of  initiatives  developed  under  the  direction  of  the  Chan- 
cellor and  Board  of  Regents  of  Higher  Education  to  improve  overall  financial  management  in  higher 
education.    The  charge  is  a  broad  and  all  encompassing  charge.    It  does  not  replace  the  State  Audi- 
tor, the  Federal  Auditors,  the  Public  Accounting  Firms,  or  the  internal  audit  function  at  the  individual 
campuses  within  The  System.    Instead  it  complements  all  these  audit  activities  by  attempting  to  coordi- 
nate the  individual  audit  efforts  wherever  possible,  assisting  campuses  with  their  responses  to  audit 
findings,  identifying  problems  to  avoid  future  audit  findings  and  performing  detailed  audits  of  cam- 
puses' compliance  with  specific  laws,  policies  and  regulations. 

B.  AUDIT  CHARTER: 

NATURE 

The  Compliance  Unit  is  established  as  an  independent  appraisal  activity  within  the  Board  of  Re- 
gents of  Higher  Education  as  a  managerial  control  which  functions  by  measuring  and  evaluating  the 
effectiveness  of  other  controls. 

OBJECTIVE  AND  SCOPE 

The  Compliance  Unit  will  act  as  an  internal  audit  group  for  the  Board  of  Regents.    The  objective 
of  internal  auditing  is  to  assist  all  levels  of  management  in  the  effective  discharge  of  their  responsibili- 
ties, by  furnishing  them  with  analyses,  appraisals,  recommendations  and  pertinent  comments  concern- 
ing the  activities  reviewed.    The  Compliance  Unit  is  concerned  with  any  phase  of  activity  where  it  can 
be  of  service  to  management.    This  involves  going  beyond  the  accounting  and  financial  records  to  ob- 
tain a  full  understanding  of  the  operations  under  review.    The  attainment  of  this  overall  objective  in- 
volves such  activities  as:  ^ 

« 

•  Reviewing  and  appraising  the  soundness,  adequacy  and  application  of 
accounting,  financial  and  operational  controls  at  executive  and  staff 
levels. 
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•  Ascertaining  the  extent  of  compliance  with  established  policies,  plans 
and  procedures. 

•  Ascertaining  the  extent  to  which  assets  are  accounted  for  and  safe- 
guarded from  losses  of  all  kinds. 

•  Ascertaining  the  reliability  of  management  data  developed  and  re- 
ported within  the  Board  of  Regents  of  Higher  Education  and  the  29 
public  college  campuses. 

•  Recommending  appropriate  improvements  in  internal  accounting  and 
operations  where  controls  have  been  found  to  be  malfunctioning,  or 
where  controls  should  be  instituted  and  none  exist. 

•  Reporting  the  results  of  examinations  in  a  timely  manner  and    review- 
ing the  timeliness  of  corrective  actions. 

V 

•  Appraising  the  effectiveness  of  procedures,  as  modified,  to  ensure  the 
deficiencies  are  satisfactorily  resolved. 

AUTHORITY  AND  RESPONSIBILITY 

The  Compliance  Unit  is  provided  with  authority  for  full  access  to  all  of  the  Board  of  Regents  of 
Higher  Education  and  the  29  public  college  campuses'  records,  properties,  and  personnel  relevant  to 
the  subject  of  review.    The  Compliance  Unit  is  free  to  review  and  appraise  policies,  plans,  procedures 
and  records. 

The  responsibilities  of  the  Compliance  Unit  are  as  follows: 

•  Develop  an  internal  audit  program  which  will  include  evaluation  of  the 
effectiveness  of  financial  and  related  operational  controls  and  review 
of  compliance  by  the  Board  of  Regents  of  Higher  Education  and  the 
29  public  college  campuses'  personnel  with  the  established  policies, 
procedures  and  laws. 

•  Institute  controls  to  assure  that  audit  findings  have  been  reviewed  with 
the  management  responsible  for  operations  of  the  function  examined. 

•  Insure  the  development  of  appropriate  comments  and  recommenda- 
tions for  inclusion  in  reports  to  be  presented  to  the  management  re- 
sponsible for  the  function  examined,  the  Chancellor  of  the  Board  of 
Regents  of  Higher  Education  and  the  Vice  Chancellor  for  Fiscal  Af- 
fairs and  Management  of  the  Board  of  Regents  of  Higher  Education. 

•  Provide  a  report  detailing  all  audits  performed,  including  the  comments 

and  recommendations  of  such  audits,  quarterly  to  the  Board  of  Re-  ^ 

gents  of  Higher  Education's  Audit  Committee;  semiannually  to  the 
House  and  Senate  Committees  on  Ways  and  Means,  to  the  Secretary 
of  Administration  and  Finance,  to  the  Office  of  the  State  Auditor,  to 
the  Office  of  the  Inspector  General,  and  to  the  Office  of  the  Comp- 


troUer;  and  annually  to  the  Board  of  Regents  of  Higher  Education  at 
its  June  meeting. 

•  Oversee  the  responses,  and  subsequent  implementation  of  said  re- 
sponses, to  Government  and  other  external  audit  agencies'  reports  and 
develop  effective  professional  relationships  with  these  agencies. 

•  See  to  the  recruitment  and  training  of  audit  staff. 

•  Institute  appropriate  budgetary  and  cost  control  over  the  auditing  pro- 
gram. 

•  Discharge  all  responsibilities  in  a  manner  which  is  consistent  with  Code 
of  Ethics  of  the  Institute  of  Internal  Auditors. 

•  Coordinate  all  activities  of  the  Compliance  Unit  with  others  as  to  best 
achieve  the  audit  objectives  and  the  objectives  of  the  Board  of  Regents 
of  Higher  Education  and  the  29  public  college  campuses. 

In  performing  its  functions,  the  Compliance  Unit  has  no  direct  responsibility  for,  nor  authority 
over,  any  of  the  activities  which  are  reviewed.    Therefore,  the  review  and  appraisal  activity  does  not 
in  any  way  relieve  other  persons  in  the  organization  of  the  responsibilities  assigned  to  them. 

INDEPENDENCE 

The  Director  of  the  Compliance  Unit  reports  to  the  Chancellor  of  the  Board  of  Regents  of 
Higher  Education  through  the  Vice  Chancellor  for  Fiscal  Affairs  and  Management,  with  direct  access 
to  the  Board  of  Regents  of  Higher  Education's  Audit  Committee.    In  order  to  maintain  objectivity,  the 
Compliance  Unit  will  not  undertake  to  develop  and  install  procedures,  prepare  records,  or  engage  in 
any  other  activity  which  it  would  normally  review  and  appraise,  and  which  could  reasonably  be  con- 
strued to  comprise  its  independence.    Objectivity  is  not  adversely  affected  by  the  recommendation  of 
the  standards  of  control  to  be  applied  in  the  development  of  systems  and  procedures  under  review. 

C.  INTERNAL  AUDITING— QUESTIONS  AND  ANSWERS: 

QUESTION:  WHAT  DOES  INTERNAL  AUDIT  DO? 

ANSWER:  Internal  Audit  reviews  how  an  organizational  unit  operates.    The  review  examines  the  uses 
of  financial  resources,  including  how  it  is  budgeted,  how  expenditures  are  controlled,  and  whether 
there  is  room  for  improvement.    It  provides  a  service  to  management  by  assisting  them  in  the  effective 
discharge  of  their  duties  and  responsibilities  by  examining  and  evaluating  the  adequacy  and  effective- 
ness of  financial  and  operational  internal  control  systems  to  verify  that: 

•  financial  property  and  information  assets  are  safeguarded, 

•  information  is  accurate  and  reliable,  including  the  system  of  integrity 
controls  by  which  information  is  created  and  used  within  an  automated 
or  manual  work  environment, 


•  policies  and  procedures  are  addressing  the  economical  and  effective 
use  of  resources,  and 

•  plans,  policies,  procedures,  laws  and  regulations  are  followed. 

QUESTION:  WHAT  ARE  INTERNAL  CONTROLS? 

ANSWER:  Internal  controls  are  the  means  by  which  management  insures  that  business  is  conducted  in 
the  manner  intended.    The  basic  internal  control  is  dependent  on  whom  you  hire. 

The  internal  control  environment  is  represented  by  the  way  the  transaction  process  is  designed  to 
function  and  how  this  process  is  monitored  for  compliance  with  the  established  policies  and  proce- 
dures.   Internal  controls  can  result  from  a  general  agreement  and  may  be  very  informal.    They  can 
also  be  explicit,  taking   the  form  of  codes,  rules  and  regulations  of  conduct  and  process. 

When  internal  controls  are  not  appropriate  in  their  design  or  function  or  if  they're  inadequate, 
and  give  undesired  outcomes,  then  they  should  be  revised. 

QUESTION:  HOW  DOES  INTERNAL  AUDITING  DETER  FRAUD? 

ANSWER:  It  is  expected  that  the  system  of  internal  control  will  be  sufficient  to  deter  fraud.    Internal 
Audit's  principal  purpose  is  to  see  to  the  continuing  review  of  internal  controls.    This  evaluation  is 
designed  to  permit  reasonable  assurance  that  management  will  identify  a  material  misstatement  or  loss 
of  assets  and  that  its  processes  ensure  efficient  and  effective  support  of  its  mission. 

QUESTION:  WHAT  TYPES  OF  AUDITS  ARE  PERFORMED? 

ANSWER:  Audit  projects  can  be  placed  into  four  categories: 

•  operational  audits, 

•  financial  audits, 

•  compliance  audits,  and 

•  electronic  data  processing  (EDP)  audits. 

The  operational  or  evaluative  audit  regards  the  broadest  spectrum  of  organizational  activity.    Op- 
erational auditing  examines  the  use  of  resources  by  the  unit  under  review,  including  people,  equip- 
ment, facilities,  funds  and  information.    It  seeks  to  evaluate  and  determine  whether  the  resources 
available  to  the  unit  are  appropriate  to  the  unit's  mission  and  objectives,  and  whether  those  resources 
are  being  used  in  the  most  efficient  and  effective  way.    The  operational  audit  includes  elements  of  the 
compliance  audit,  the  financial  audit,  and  the  EDP  audit  in  the  fact-finding  phases.    This  type  of 
audit  is  frequently  referred  to  as  management  auditing  and  requires  the  close  collaboration  betv^een 
the  auditor  and  the  auditee  in  order  to  accomplish  the  evaluation  goals. 

The  financial  audit  limits  its  scope  to  questions  of  accounting  and  reporting  of  financial  transac- 
tions, including  the  commitment,  authorization  and  disbursement  of  funds.    The  financial  audit  seeks 


to  assure  management  that  there  are  sufficient  physical  controls  over  cash  and  cash-like  assets,  and 
that  there  are  adequate  process  controls  over  acquisition  and  use  of  capital. 

The  compliance  audit  limits  its  scope  to  an  evaluation  of  the  degree  of  adherence  to  laws,  regula- 
tions, policies  and  published  procedures.    Recommendations  typically  call  for  improvements  to  proc- 
esses and  controls  intended  to  assure  conformity  with  regulations. 

The  electronic  data  processing  audit  addresses  the  internal  control  environment  of  automated  in- 
formation and  transaction  processing  systems,  and  how  people  use  those  systems.    Some  EDP  auditing 
projects  occur  during  the  development  stage  for  new  systems,  while  other  reviews  occur  once  the  sys- 
tem is  in  production  mode. 

QUESTION:  HOW  ARE  AUDITS  SELECTED? 

ANSWER:  The  decision  of  what  to  audit  and  when  requires  the  collaboration  of  Internal  Audit  with 
senior  management  executives  and  an  assessment  of  risk,  previous  audit  coverage  and  significance  of 
audit  findings,  and  the  frequency  of  need  for  contact.    Any  individual  perceiving  an  apparent  impro- 
priety should  feel  free  to  inform  Internal  Audit  of  their  concerns.    During  the  planning  process,  Inter- 
nal Audit  determines  whether  the  particular  project  requires  a  narrow  focus  or  whether  the  review  will 
be  more  general  in  nature. 

Except  in  cases  of  suspected  irregularity,  such  as  fraud  or  theft.  Internal  Audit  discusses  the  most 
appropriate  scope  of  the  review  with  the  managers  and  users  concerned  to  make  the  most  effective 
use  of  time  available  to  conduct  the  review. 

Because  the  internal  audit  function  is  an  ongoing  evaluative  function  of  management's  activities, 
the  Internal  Audit  Department  rarely  has  the  ability  to  provide  information  for  an  immediate  opera- 
tional problem.    Close  coordination  of  the  scope  and  timing  of  an  audit  is  vital  to  ensure  that  the 
audit  is  effective.    Although  collaboration  is  the  normal  mode  for  determining  the  scope  and  schedule 
for  a  particular  audit,  it  may  be  necessary  for  Internal  Audit  to  pre-empt  others'  wishes  in  order  to 
fulfill  its  larger  responsibilities. 

QUESTION:  DOES  THE  AUDITOR  HAVE  STANDARDS  WHICH  MUSI  BE  FOLLOWED? 

ANSWER:  Yes,  four  distinct  sets  of  standards  have  evolved  to  guide  the  auditor.    They  are:  (1)  "Gen- 
erally Accepted  Auditing  Standards"  by  the  American  Institute  of  Certified  Public  Accountants 
(AICPA),  (2) "Standards  for  Audit  of  Governmental  Organizations,  Programs,  Activities,  and  Func- 
tions" by  the  United  States  General  Accounting  Office  (GAO),  (3) "Standards  for  the  Professional 
Practice  of  Internal  Auditing"  by  the  Institute  of  Internal  Auditors,  Inc.(IIA),  and  (4) "General  Stan- 
dards for  Information  System  Auditing"  by  the  EDP  Auditors  Association  (EDPAA). 

In  addition,  the  auditor  will  use  whatever  published  policy  statements  there  are  for  the  activity 
being  audited.    In  the  absence  of  articulated  policy,  the  auditor  will  use  professional  judgment  and  will 
test  standards  and  conclusions  drawn  with  those  being  audited  and  with  those  with  responsibility  for 
policy  matters. 
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QUESTION:  HOW  ARE  AUDITS  EXECUTED? 

ANSWER:  Common  elements  of  each  audit  project  include: 

•  determining  management's  concerns  through  pre-audit  contact,  nor- 
mally referred  to  as  the  survey; 

•  documenting  control  procedures  with  an  evaluation  of  these  controls; 

•  testing  to  ensure  proper  operations  of  the  controls; 

•  developing  conclusions  regarding  the  appropriateness,  efficiency,  and 
effectiveness  of  policy  and  process  based  upon  the  testing  information; 

•  reviewing  audit  findings  with  the  persons  involved  on  all  levels  to  en- 
sure accuracy  of  results  and  clarity  of  recommendations; 

•  preparing  and  distributing  an  audit  report  that  includes  management's 
response  to  issues  raised;  and 

•  providing  follow-up  to  ensure  that  issues  raised  are  resolved  on    a 
timely  basis. 

IN  SUMMARY: 

Internal  auditing' s  purpose  is  to  perform  objective  and  independent  appraisals,  and  to  report  to 
the  responsible  administrative  officers  on  the  adequacy  of  all  internal  controls.  It  provides  manage- 
ment with  an  ongoing  evaluation  of  administrative  programs,  through  auditing  which  is  responsive  to 
the  needs  of  management  and  which  takes  into  account  the  limited  resources  available  to  do  all  the 
things  that  need  to  be  done.  It  is  a  useful  resource  and  can  aid  in  ensuring  that  administrative  sys- 
tems function  adequately,  in  identifying  problems,  and  in  providing  recommendations  for  conclusions. 

SOURCES: 

A  publication  of  the  Internal  Audit  Department,  Stanford  University,  "Stanford  University  —  Internal 
Audit  Department",  Stanford,  California:  The  Board  of  Trustees  of  The  Leland  Stanford  Junior  Uni- 
versity, 1987. 

Jerry  D.  Sullivan,C.P.A.,  Richard  A.  Gnospelius.C.P.A.,  Philip  L.  Defliese.C.P.A.,  Henry  R. 
Jaenicke,Ph.D.,C.P.A.,  "Montgomery's  Auditing",  Coopers  &  Lybrand,  1985. 


ORGANIZATIONAL  STRUCTURE 


The  Director  of  the  Compliance  Unit  reports  to  the  Chancellor  of  the  Board  of  Regents  of 
Higher  Education  through  the  Vice  Chancellor  for  Fiscal  Affairs  and  Management,  with  direct  access 
to  the  Board  of  Regents  of  Higher  Education's  Audit  Committee. 

The  staff  of  the  Compliance  Unit  is  comprised  of  four  individuals: 

DIRECTOR — Responsible  for  directing  and  supervising  a  broad,  comprehensive  program  of  internal 
auditing  which  assesses  the  adequacy  and  effectiveness  of  existing  managerial  and  financial  controls  at 
each  campus  and  the  Board. 

SENIOR  AUDITOR — Responsible  for  performing  audits  reviewing  and  appraising  the  soundness,  ade- 
quacy and  applications  of  accounting,  financial  and  operating  controls  including  compliance  with  estab- 
lished policies,  plans  and  procedures. 

PROGRAM  AUDITOR — Responsible  for  evaluating  the  policies  and  procedures  that  are  in  place  for 
managing  the  various  federal  and  state  student  financial  aid  programs. 

ASSISTANT  AUDITOR — Responsible  for  performing  the  administrative  and  clerical  duties  within  the 
Compliance  Unit  and  to  assist  the  auditors  in  their  review  and  appraisal  of  the  accounting,  financial 
and  other  data  developed  within  The  System. 


OVERVIEW  OF  AUDIT  ACTIVITIES 

A.  NON-APPROPRIATED  FUNDS  (TRUST  FUNDS): 

In  December,  1987,  the  Comptroller,  Ellen  M.  O'Connor,  recommended  that  an  Advisory 
Group  of  Regents,  Institutions,  State  Treasurer  and  Comptroller  staff  be  assembled  to  develop  specific 
design  and  implementation  plans  to  address  the  recommendations  made  by  a  study  performed  by  Tou- 
che  Ross  &  Co.,  Certified  Public  Accountants,  on  the  treatment  of  higher  education  "trust"  funds. 
The  major  recommendations  were  as  follows: 

•  The  existing  non-appropriated  funds  should  be  classified  into  a  fund 
structure  that  corresponds  to  the  actual  function  and  purpose  of  the 
individual  funds. 

■  This  structure  should  conform  to  existing  GAAP  standards. 

•  Reporting  should  be  standardized  for  all  schools  and  should  be  based 
upon  the  fund  structure  as  described  above. 

•  Accounting  policies  and  systems  need  to  be  standardized  across  com- 
parable institutions. 

•  Cash  management  policies  should  be  standardized  with  the  goal  of 
maximizing  the  return  on  the  funds  invested. 

The  Director  of  the  Compliance  Unit  is  a  member  of  the  Task  Force  which  meet  eight  times 
during  calendar  year  1988  and  expended  hundreds  of  hours  to  research  current  practices  of  each 
campus,  to  examine  current  and  proposed  accounting  and  reporting  standards,  and  to  develop  several 
options  to  best  address  this  topic.    The  project  continues  into  1989  and  currently  two  reporting  op- 
tions are  being  distributed  to  the  campuses.    Each  school  will  be  offered  a  choice  on  how  to  account 
and  report  on  the  financial  operations  of  non-appropriated  funds.    Option  1  recognizes  that  some 
schools  already  posses  a  separate  and  local  accounting  system.    Upon  review  by  the  Task  Force,  if  a 
school  is  determined  to  have  an  acceptable  system  to  control  and  report  non-appropriated  funds,  it 
will  be  allowed  to  use  said  system  and  communicate  through  reporting  the  financial  operations  to  the 
Office  of  the  Comptroller  and  the  Board  of  Regents.    Option  2  is  for  those  schools  who  do  not  select 
or  are  not  approved  for  Option  1.    Option  2  uses  the  Massachusetts  Management  Accounting  and 
Reporting  System,  MMARS.    A  new  account  type  05  to  MMARS  will  be  customized  to  the  legal  and 
practical  requirements  of  higher  education. 

Another  side  of  non-appropriated  funds  is  the  questions  about  the  proper  use  of  these  funds. 
The  Compliance  Unit  is  working  with  the  Board  of  Regents  to  draft  regulations  governing  non-appro- 
priated funds.    In  addition,  we  are  working  with  the  accounting  firm  of  Coopers  and  Lybrand  to  pre- 
pare for  the  Public  Higher  Education  System  guidelines  for  the  expenditure  of  non-appropriated 
funds. 


B.  TUITION  RETENTION: 

Chapter  164  of  the  Acts  of  1988  provides  that  "Boards  of  Trustees  shall  retain  and  may  expend 
revenues  which  are  attributable  solely  to  an  increase  in  the  authorized  tuition  rates  for  Fiscal  1989 
over  the  rates  in  existence  for  Fiscal  1988.... all  revenues  credited  to  and  expenditures  from  these  ac- 
counts shall  be  subject  to  annual  audit  by  the  board  of  regents"    The  Compliance  Unit  participated  in 
the  development  of  the  regulations  promulgated  by  the  Board  of  Regents  governing  tuition  retention. 
Preliminary  reviews  indicate  tuition  retention  regulations  are  being  followed. 


C.  STATE'S  SINGLE  AUDIT: 

In  a  meeting  on  October  21,  1987,  an  agreement  was  reached  between: 

•  Regional  Inspector  General  for  Audit,  U.S.  Department  of  Education, 

•  Single  Audit  Coordinator,  U.S.  Department  of  Transportation, 

•  Touche  Ross  &  Co.,  Certified  Public  Accountants, 

•  Board  of  Regents  of  Higher  Education, 

•  Office  of  the  Comptroller,  and 

•  Office  of  the  State  Auditor, 

for  the  following  approach  to  be  used  to  audit  state  colleges  and  universities  in  the  Commonwealth  of 
Massachusetts  as  part  of  the  State's  Single  Audit.    The  approach  requires  that  cyclical  audit  work  will 
be  performed  by  Touche  Ross  &  Co.  or  its  successor  audit  firm,  and  the  Massachusetts  State  Audi- 
tor's Office.    The  Compliance  Unit  of  the  Board  of  Regents  will  perform  internal  audit  work  which 
will  be  considered  by  Touche  Ross  &  Co.,  pursuant  to  the  provisions  of  AU  Section  322,  in  determin- 
ing the  scope  and  extent  of  its  audit  work.    The  efforts  of  the  three  audit  organizations  will  be  coordi- 
nated by  the  Office  of  the  Comptroller.    The  Compliance  Unit  participated  in  this  coordinated  audit 
effort  for  the  fiscal  year  1988  Single  Audit.    Due  to  the  Compliance  Unit's  limited  resources,  our  ef- 
forts were  confined  to  the  Single  Audit  at  Roxbury  Community  College  and  the  participation  in  the 
overall  coordination  of  the  State's  Single  Audit  within  higher  education. 


D.  ROXBURY  COMMUNITY  COLLEGE: 

On  July  26,  1988,  the  Board  of  Trustees  and  the  executive  administration  of  Roxbury  Commu- 
nity College,  requested  the  assistance  of  a  Special  Task  Force  on  fiscal  operations  from  the  Chancellor 
of  the  Board  of  Regents  of  Higher  Education.    The  Chancellor  assigned  a  team  headed  by  the  Direc- 
tor of  the  Compliance  Unit.    In  addition  to  the  Director  of  the  Compliance  Unit,  the  Special  Task 
Force  consisted  of  the  staff  of  the  Compliance  Unit,  two  members  from  the  Office  of  the  State  Audi- 
tor and  consulting  support  from  the  Office  of  the  Comptroller  and  State  Treasurer.    A  summary  of 
the  accomplishments  of  the  Special  Task  Force  at  Roxbury  Community  College  includes: 

.  Reconstruction  and  organization  of  financial  records  for  fiscal  year 
1988. 

■  Satisfaction  of  State  Single  Audit  of  Title  IV  Student  Financial  Aid 
Funds  for  award  year  1988. 

•  Negotiations  with  the  U.S.  Department  of  Education  for  the  continu- 
ation of  Title  IV  Student  Financial  Aid  Funds  for  award  year  1989 
and  the  future. 

•  Reorganization  of  Senior  Management  staff  (ongoing). 

•  Reorganization  of  Business  Office  (ongoing). 

•  Establishment/reinforcement  of  policies  and  procedures  (including  audit 
trails)  for  the  Offices  of  Admission,  Student  Financial  Aid,  Business 
Office,  and  Computer  Services  (ongoing). 

•  Establishment/reinforcement  of  policies  and  procedures  for  the  budget- 
ing and  spending  of  all  appropriated  and  non-appropriated  funds  (on- 
going). 

•  Accounted  for  1.6  million  dollars  of  equipment,  furniture  and  fixtures 
purchased  in  fiscal  year  1988. 

•  Assisted  in  the  day-to-day  operational  activities  including:  registration, 
student  financial  aid  awards,  issuance  of  book  vouchers,  bank  recon- 
ciliations, financial  aid  reports,  student  billing,  third-party  billing,  ven- 
dor complaints  concerning  unpaid  invoices,  negotiating  service  con- 
tracts, students  complaints,  fulfilling  obligation  under  Perkins  Loan 
Program,  formerly  NDSL,  etc.  (ongoing). 

The  Special  Task  Force  is  continuing  its  efforts  at  Roxbury  Community  College  and  will  issue  a 
report  summarizing  its  observations  and  recommendations  by  June  30,  1989. 
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FUTURE  AUDIT  PLANS 

For  calendar  year  1989,  the  Compliance  Unit  plans  to: 

A.  Complete  the  efforts  of  the  Special  Task  Force  at  Roxbury  Community  College. 

B.  Continue  efforts  in  the  area  of  non-appropriated  funds  (trust  funds). 

C.  Perform  audits  at  the  27  colleges  and  universities  in  accordance  with  tuition  retention 
regulations. 

D.  Continued  participation  in  the  State's  single  audit  effort. 

E.  Follow-up  on  current  and  prior  audit  reports  of  third  parties  concerning  the  System  of 
Higher  Education. 

In  addition  to  the  above,  the  Compliance  Unit  will  perform  special  tasks  as  deemed  necessary  by 
the  Chancellor  and  the  Board  of  Regents. 
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